Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49275

can: m_can: m_can_tx_handler(): fix use after free of skb

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_tx_handler(): fix use after free of skb can_put_echo_skb() will clone skb then free the skb. Move the can_put_echo_skb() for the m_can version 3.0.x directly before the start of the xmit in hardware, similar to the 3.1.x branch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 80646733f11c2e9de3b6339f7e635047e6087280 to < d93ed9aff64968f4cdad690712eb4f48ae537bdeaffected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < d3892a747ab16b1eb6593a19d29f62c3b3f020acaffected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < 7728d937ec403a1ceff9483023252d2cb8777f81affected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < 08d90846e438ac22dc56fc49ec0b0d195831c5edaffected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < 869016a2938ac44f7b2fb7fc22c89edad99eb9b3affected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < f43e64076ff1b1dcb893fb77ad1204105f710a29affected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < 4db7d6f481990dd179a9ee7126dc7aa31ea4fff3affected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < 31417073493f302d26ab66b3abc098d43227b835affected
  • 80646733f11c2e9de3b6339f7e635047e6087280 to < 2e8e79c416aae1de224c0f1860f2e3350fa171f8affected

Linux Linux

Default version status: affected

  • 3.18affected
  • 0 to < 3.18unaffected
  • 4.9.324 to ≤ 4.9.*unaffected
  • 4.14.289 to ≤ 4.14.*unaffected
  • 4.19.253 to ≤ 4.19.*unaffected
  • 5.4.207 to ≤ 5.4.*unaffected
  • 5.10.110 to ≤ 5.10.*unaffected
  • 5.15.33 to ≤ 5.15.*unaffected
  • 5.16.19 to ≤ 5.16.*unaffected
  • 5.17.2 to ≤ 5.17.*unaffected
  • 5.18 to ≤ *unaffected

References